1125 matches found
MAL-2025-142794 Malicious code in galaxy-semantic-release-auriga-norma (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a48c9d3fed4f83d961b8702a5d20149d2721e2318a9e39ae8feaa081ad159467 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147792 Malicious code in sedna-semantic-release-gridsome-janus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 200f5eb4d63522bd7104b3839da11edf43c7e7966ba5db0d95c58bb23422c0e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147851 Malicious code in semantic-ui-leda-dependencies-rate-limiter (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cbdad42f05ae6cec01ed8b7b3e027c1b1386cd3c563a1ec7aeef9f8f1e1e54a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143259 Malicious code in helmet-postgres-semantic-ui-frontend (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1806fa3dd985b486547323fc55566005a0acd0adf10474256d4e0bf9909d94f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147842 Malicious code in semantic-ui-concurrently-enceladus-toml (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e9348abe7dceafcbea1bb3601475a31350792e0fcf6ac6edef9d9fbc27f3268 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in cross-env-semantic-ui-dependencies-europa (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6332d430064a3f2838ee485b692085966c87a656a847987e105921afff07be4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-114837
Malicious code in cross-env-semantic-ui-dependencies-europa npm...
EUVD-2025-115479
Malicious code in chakra-ui-semantic-ui-query-virgo npm...
MAL-2025-140372 Malicious code in canopus-rollup-semantic-ui-heka (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5103f0a8650f4e9f282e4b3f6b488dc1bca436344cd8eaa9a147741e10b363f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143606 Malicious code in ini-rollup-plugin-gulp-semantic-ui (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9860e43f28b0ece8e3c8d36b595e5eee206c686e720066e2a8d028415cf4327 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141087 Malicious code in convict-rate-limiter-semantic-release-cypress (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 699a64376c5c66937eacea59c9b1aed2fa6498e62068c77e5311cbefed085e56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147849 Malicious code in semantic-ui-jupiter-celeste-chai (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b3f13d58c06befb22e193f9117b1df12449898bb2a695c46c907b21ca14bb68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147857 Malicious code in semantic-ui-test-test-sirius (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39408caea52c1551fa2c025eaa9dc9638438e19eda194e02ea83b610ac1c75e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-145139 Malicious code in mongodb-semantic-release-elektra-delphinus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c718397129adb9c3c718f37bf5cecd57fc85c2c49618154e9f7ad5114f9696d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-140452 Malicious code in carpo-semantic-release-kaus-jovian (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77f109704ac2f7e249ef4083f207485a8d26ee826962f8c0a3ac0e7a23f2f4bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-114471
Malicious code in development-version-schema-semantic-release npm...
MAL-2025-149895 Malicious code in zephyr-semantic-ui-mysql-frontend (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63e57d11c4d7901d16ef26e405850611d2f59d8153b151f725245de49008bea7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in semantic-release-loglevel-mongoose-buffer (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7d4379a07b9b657c57b819077071e16d07701bbada1f2a463dfa01a43464e28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...